Server-Side Template Injection and Code Injection Detection and Exploitation Tool

List DTDs and generate XXE payloads using those local DTDs.

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more c…

Monitor linux processes without root permissions

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Top disclosed reports from HackerOne

A fast tool to scan CRLF vulnerability written in Go

Contextual Content Discovery Tool

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, …

CORS Misconfiguration Scanner

Web path scanner

A simple script just made for self use for bypassing 403

Gospider - Fast web spider written in Go

「🔑」A tool used to hunt down API key leaks in JS files and pages

🎯 Open Redirect Payload List

Small tool to Grab subdomains using Shodan api.

This repository contains a roadmap for preparing for the EJPT exam.

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Small, fast tool for performing reverse DNS lookups en masse.

Bambdas collection for Burp Suite Professional and Community.

The Network Execution Tool

Mirror of https://gitlab.com/Remmina/Remmina The GTK+ Remmina Remote Desktop Client

Collection of methodology and test case for various web vulnerabilities.

ODAT: Oracle Database Attacking Tool

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

dnsenum is a perl script that enumerates DNS information

My Security Article space on GitHub dedicated to sharing insights, best practices, and discussions related to cybersecurity, ensuring safer code and applications.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.